Website Acquisition Due Diligence Checklist + Negotiation & Offer Template

Overview

Due diligence is the process of testing whether an online business is what the seller says it is, whether its performance is sustainable, and whether you can legally and practically take control of it. The goal is not to remove every risk. It is to identify material risks early, price them appropriately, and decide whether the opportunity fits your operating abilities.

Start by creating a shared diligence folder and a simple issue log. Record each request, the seller’s response, the supporting document, and your conclusion. Separate verified information from statements that still need evidence. A marketplace listing is a useful starting point, but it should not be treated as a substitute for primary records.

Before reviewing sensitive information, agree on confidentiality terms where appropriate. Confirm who owns the business, which assets are included, how the transaction will be handled, and whether the seller is authorized to provide the requested information. If the deal is material to you, involve an accountant and lawyer before signing definitive documents.

For broader marketplace research, compare listing quality, buyer protections, and transaction processes in our comparison of marketplaces for buying and selling online businesses. If you are evaluating a domain-heavy acquisition, use the separate domain acquisition checklist as a companion resource.

What to track

Use the following website due diligence checklist as a minimum evidence request. Adapt it to the business model: a SaaS company needs product and subscription analysis, while a content site needs more attention on traffic sources, publishing rights, and search dependence.

1. Ownership and seller identity

• Legal name and contact details of the seller or selling entity.
• Evidence that the seller owns the website, domain, code, brand, customer list, and other assets being offered.
• A list of shareholders, partners, contractors, or other parties whose consent may be needed.
• Any prior sale, licensing arrangement, security interest, dispute, or obligation affecting the assets.
• A clear schedule of included and excluded assets, accounts, subscriptions, inventory, and liabilities.

2. Revenue, expenses, and cash flow

• Monthly revenue by channel for a period long enough to show seasonality and recent changes.
• Payment processor, bank, advertising, affiliate, ecommerce, or subscription records that reconcile to the reported revenue.
• A monthly profit-and-loss statement with one-time costs and owner expenses identified separately.
• Refunds, chargebacks, cancellations, taxes, outstanding invoices, and unpaid obligations.
• Customer concentration, major contracts, pricing changes, and any revenue that depends on a single partner.

Do not focus only on the seller’s stated profit. Rebuild an owner-adjusted view by removing expenses that will not continue and adding costs you will incur after acquisition, such as software, support, contractors, compliance, or paid acquisition. This produces a more useful basis for valuation and financing discussions. The online business valuation guide can help you organize that analysis.

3. Traffic, customers, and marketing

• Read-only access or verifiable exports from analytics, search tools, advertising platforms, and email systems.
• Traffic by source, landing page, country, device, and month.
• Conversions, leads, sales, customer acquisition cost, and retention where relevant.
• Evidence of whether traffic is branded, non-branded, paid, referral-based, social, direct, or search-driven.
• Major traffic changes, algorithm-related drops, tracking gaps, suspicious referral spikes, or unexplained discrepancies.

Compare traffic trends with revenue trends. A stable visitor count paired with declining conversions may indicate changes in audience intent, pricing, tracking, or site quality. A sudden traffic increase concentrated in one page or source deserves a closer review rather than an automatic valuation premium.

4. SEO and content quality

• A complete list of important pages, their traffic, rankings, backlinks, and business purpose.
• Search console or equivalent evidence covering clicks, impressions, indexed pages, and notable changes.
• Content ownership records, writer agreements, image licenses, affiliate disclosures, and publication rights.
• Evidence of manual actions, unresolved technical issues, copied content, expired content, or risky link-building practices.
• A review of the top pages for accuracy, originality, commercial intent, and dependence on outdated information.

Pay special attention to traffic that depends on a small number of pages, keywords, links, or search features. Ask what maintenance is required to keep those pages useful. A content site can appear profitable while carrying a substantial backlog of updates, corrections, and rights verification.

5. Technology and operations

• Hosting, domain registrar, DNS, code repository, deployment process, backups, and recovery procedures.
• Administrator access, third-party integrations, API keys, licenses, plugins, and recurring software commitments.
• Technical architecture, known bugs, security incidents, uptime history, and dependency on a single developer.
• Customer support processes, standard operating procedures, supplier relationships, and undocumented recurring tasks.
• A transition plan covering credentials, data migration, account ownership, introductions, and seller support.

Confirm that access can actually be transferred. Some accounts, licenses, advertising profiles, or marketplace identities may have restrictions or require a separate transition process. Never assume that an informal promise to provide access later is equivalent to a transfer obligation in the purchase agreement.

6. Legal, privacy, and customer obligations

• Registered trademarks, business names, domains, copyrights, patents, and licenses relevant to the operation.
• Terms of service, privacy notices, cookie practices, data-processing arrangements, and customer consent records.
• Customer, vendor, affiliate, employment, contractor, and distribution agreements.
• Complaints, threatened claims, regulatory notices, refunds, warranties, or unresolved disputes.
• Any personal data, regulated information, or customer contracts that require special handling during transfer.

Legal requirements vary by location and business model. Treat this list as a prompt for professional review, not as legal advice.

7. Seller proof and red flags

Ask for evidence that can be independently reconciled. Useful proof includes platform exports, processor statements, read-only analytics access, dated screenshots supported by underlying records, contracts, and account-level histories. Be cautious when a seller refuses reasonable verification, pressures you to skip an agreement, changes the numbers between conversations, or presents only selected screenshots without context.

Other warning signs include unexplained traffic or revenue spikes, dependence on one customer or platform, unclear asset ownership, copied content, undisclosed liabilities, rushed payment instructions, and a reluctance to use neutral letter-of-intent and purchase documentation. A red flag is not always a reason to walk away, but it should lead to a specific question, a protective term, a price adjustment, or a decision not to proceed.

Cadence and checkpoints

Run diligence in stages so you do not spend weeks deeply reviewing an opportunity that fails a basic screen.

1. Initial screen: Check the business model, asking price, reported earnings, ownership, traffic sources, and whether the opportunity fits your skills and available capital.
2. Evidence review: Reconcile revenue, expenses, traffic, customers, and key operating claims using primary records.
3. Risk review: Examine SEO, technology, legal rights, customer obligations, transferability, and operational dependence.
4. Offer and LOI: Make the offer conditional on satisfactory final diligence, definitive agreements, and successful transfer preparation.
5. Pre-closing confirmation: Refresh material metrics, confirm no major changes, verify account access plans, and prepare the escrow and closing checklist.
6. Transition review: Track the handover of accounts, credentials, customers, vendors, documentation, and seller support obligations.

Use an escrow or transaction process that both parties understand, and verify the provider’s current terms before sending funds. Review the financing and deal-structure guide if you are considering seller financing, an earnout, or staged payments. Those structures should define measurement, reporting, control, dispute handling, and what happens if performance changes.

How to interpret changes

Do not treat every month-to-month movement as a trend. Compare like periods, investigate the cause, and distinguish temporary volatility from a structural change. For example, a seasonal revenue decline may be expected, while a decline in returning customers after a pricing change may require a different valuation assumption.

Track a small set of decision metrics:

• Monthly revenue, adjusted profit, and cash collected.
• Traffic and conversions by source, not just total visitors.
• Customer retention, cancellations, refunds, and concentration.
• Top-page and top-keyword dependence for content or SEO-led businesses.
• Operational hours, support volume, technical incidents, and unpaid work required from the owner.

When a metric changes, ask four questions: What changed? When did it change? What evidence explains it? Does the change affect future cash flow, transferability, or the work required from the buyer? Update your valuation only after answering those questions. A risk that can be measured and mitigated may call for a holdback or transition obligation; a risk that cannot be verified may justify pausing the deal.

Negotiation and offer template

Adapt the following email to the facts of the deal. Replace every bracketed field before sending it, and have counsel review the final terms when appropriate.

Subject: Offer for [business or website name]

Hi [seller name],

Thank you for sharing information about [business name]. Based on my review to date, I am prepared to offer [amount and currency], subject to satisfactory completion of due diligence and execution of definitive purchase documents.

The proposed transaction would include [domain, website, code, brand, content, customer accounts, inventory, social profiles, contracts, and other included assets]. Excluded assets are [list exclusions].

Proposed structure: [cash at closing], [seller financing or earnout, if applicable], and [escrow or holdback terms]. The offer is conditional on verification of revenue, expenses, traffic, ownership, legal rights, technology, customer obligations, and transferability.

I would like [number] days for confirmatory diligence, followed by closing within [number] business days after the purchase agreement is signed. The seller would provide [number] days of reasonable transition support, including [specific introductions, documentation, and training].

This proposal is subject to a mutually acceptable purchase agreement, confidentiality terms where needed, and a secure closing process. It is not a binding commitment unless and until definitive documents are executed.

Please confirm whether these terms are workable, and identify any material information or obligations that should be included in the agreement.

Regards,
[name]

When to revisit

Use this checklist for every website acquisition, then revisit the underlying assumptions throughout the deal. Refresh financial and traffic evidence shortly before making a final commitment, and refresh it again if closing is delayed or the seller reports a material change. Recheck ownership, account access, legal rights, and transfer instructions before funds are released.

For an acquired business, review the KPI set monthly during the transition and quarterly once operations are stable. Compare actual results with the assumptions used in your offer. The online business acquisition KPI dashboard provides a framework for tracking performance before and after closing.

Update this checklist at least every six months, and sooner when a marketplace, payment provider, analytics platform, search platform, or escrow process changes its terms. Add new red flags when you encounter them. Before your next deal, remove requests that proved irrelevant, strengthen requests that exposed uncertainty, and tailor the evidence list to the business model.

Next step: create a diligence folder, copy the checklist into a tracker, assign an owner and due date to every request, and do not send a final offer until each material claim is marked verified, unresolved with a protection, or rejected.